Microsoft Excel Type Confusion Vulnerability Leading to Remote Code Execution

A type confusion vulnerability has been identified in Microsoft Office Excel. This issue allows an unauthorized attacker to execute code locally by accessing a resource using an incompatible type. The vulnerability affects several versions of Microsoft Excel, including Excel 2016, as well as various Microsoft Office LTSC and Microsoft 365 Apps for Enterprise editions.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. Instructions for downloading the update are available on the Microsoft Office Update page.